$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa File: ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa (raw, json) Hash identifier: SAwb7mdhw6Zt+bIQmGTUffCwW9uLQFLEN3p48JTCJ+g= Subject key identifier: 6E:60:6D:E1:CE:E7:33:69:3A:2E:8E:1F:0B:7C:58:BA:1D:C5:B2:8C Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B0A116B99AF795CCFA2D19740 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 3738 IP address blocks: 192.250.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6b:99:af:79:5c:cf:a2:d1:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=0fe8f805-84fa-40f1-aa10-4eaa39c14301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:21:fb:c8:69:7c:5a:89:07:86:d7:dc:4f: a9:46:68:b6:98:f9:f7:a8:63:56:9a:88:67:d7:cc: e4:95:41:e7:75:87:a8:42:7d:1e:32:5b:e5:76:f8: 77:26:ec:8d:a2:d0:93:49:14:2a:05:51:d6:29:a4: d2:7f:f2:7b:a3:4a:ea:ba:62:f9:fc:1f:69:98:9c: 85:22:fe:1c:5f:cb:0f:46:c4:6f:4b:a3:47:73:68: 52:b0:79:77:73:39:ba:eb:40:47:5d:8d:78:f2:26: 0f:83:f0:41:6a:a0:0a:3b:ff:03:9c:ea:b0:94:a8: 9a:92:42:95:8d:a9:5b:20:da:d1:79:a6:d8:95:35: 44:90:01:be:f9:42:23:20:6b:50:0b:58:a2:91:ac: fe:5e:0f:cd:36:50:85:69:ae:8f:67:a6:a0:b0:50: 28:73:88:b3:13:a8:bc:29:8b:6c:f7:87:84:61:c6: dd:ad:bb:aa:05:61:85:07:de:bf:4f:48:21:46:31: 16:18:a8:2c:43:c5:14:e0:43:ea:b7:c3:42:b6:e4: 19:41:03:a3:a1:50:68:24:09:1b:93:a6:03:ec:e5: 57:52:6a:9f:94:0b:2f:f4:1f:ba:2c:0f:67:98:79: 7f:5e:32:7f:bc:a0:81:08:0c:6f:c8:c4:b4:05:c3: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:60:6D:E1:CE:E7:33:69:3A:2E:8E:1F:0B:7C:58:BA:1D:C5:B2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:97:9b:28:25:5b:6b:39:50:a1:ee:ce:ff:74:34:44:b8:a2: 6a:71:69:31:f2:3f:b7:61:6c:62:cc:fc:47:89:eb:0d:b8:34: a6:10:a5:f2:3c:98:4b:0a:d3:a3:ee:1e:66:44:9a:2c:ac:da: 79:6b:c8:08:16:42:03:6b:47:a9:55:73:6f:69:b5:4c:19:f2: 85:f5:38:20:82:fa:75:6b:eb:c4:e4:da:2b:c4:b8:83:e3:3e: a4:97:61:17:2a:28:a2:9e:80:4f:4e:c5:19:ff:d2:77:92:80: 81:97:c9:e6:cd:ba:56:ca:ac:f7:e7:d9:ce:76:7a:bc:82:f9: 57:5f:98:c2:6c:16:de:14:2e:78:62:55:34:f1:75:3b:02:eb: 46:79:b9:1f:ae:61:e0:80:8f:c2:38:99:13:ac:53:8c:13:32: 69:0a:17:12:67:17:81:3b:dc:7f:85:04:e1:ac:11:ae:9d:ca: 85:46:b0:14:36:be:f2:d2:ec:06:83:57:92:03:e4:76:2d:a7: 74:fd:c5:2e:6b:ca:b3:de:22:d9:df:cf:0a:ec:bc:3c:67:c2: a1:1a:aa:78:ad:48:48:ee:c7:e1:7d:3c:7d:e3:20:e2:28:b9: 82:a7:3e:5b:18:28:24:f5:82:42:80:be:90:aa:d3:77:a4:be: a0:57:9f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWuZr3lcz6LRl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MGZlOGY4MDUtODRmYS00MGYxLWFhMTAtNGVhYTM5YzE0MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYQh+8hpfFqJB4bX3E+pRmi2mPn3qGNWmohn 18zklUHndYeoQn0eMlvldvh3JuyNotCTSRQqBVHWKaTSf/J7o0rqumL5/B9pmJyF Iv4cX8sPRsRvS6NHc2hSsHl3czm660BHXY148iYPg/BBaqAKO/8DnOqwlKiakkKV jalbINrReabYlTVEkAG++UIjIGtQC1iikaz+Xg/NNlCFaa6PZ6agsFAoc4izE6i8 KYts94eEYcbdrbuqBWGFB96/T0ghRjEWGKgsQ8UU4EPqt8NCtuQZQQOjoVBoJAkb k6YD7OVXUmqflAsv9B+6LA9nmHl/XjJ/vKCBCAxvyMS0BcNNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5gbeHO5zNpOi6OHwt8WLodxbKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYWNlNjEzNGEtNzRhZS0z NmM4LThhYmQtY2RkMDczYmVhNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6XmyglW2s5UKHuzv90NES4ompxaTHyP7dhbGLM/EeJ6w24NKYQpfI8 mEsK06PuHmZEmiys2nlryAgWQgNrR6lVc29ptUwZ8oX1OCCC+nVr68Tk2ivEuIPj PqSXYRcqKKKegE9OxRn/0neSgIGXyebNulbKrPfn2c52eryC+VdfmMJsFt4ULnhi VTTxdTsC60Z5uR+uYeCAj8I4mROsU4wTMmkKFxJnF4E73H+FBOGsEa6dyoVGsBQ2 vvLS7AaDV5ID5HYtp3T9xS5ryrPeItnfzwrsvDxnwqEaqnitSEjux+F9PH3jIOIo uYKnPlsYKCT1gkKAvpCq03ekvqBXn6I= -----END CERTIFICATE-----Generated at Wed Sep 17 01:06:26 2025 by rpki-client